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Abstract 

This article defines and proves basic properties of the standard 
quantum circuit model of computation. The model is developed ab- 
stractly in close analogy with (classical) deterministic and probabilis- 
tic circuits, without recourse to any physical concepts or principles. 
It is intended as a primer for theoretical computer scientists who do 
not know — and perhaps do not care to know — any physics. 

1 Why Read This? 

As an area of research, quantum computation has attracted considerable 
attention in the last few years. It has drawn physicists, computer scien- 
tists, mathematicians, engineers, and even philosophers together into an ever- 
widening investigation. The two big questions are (1) can we build a reliable 
large-scale quantum computer? and (2) what could we ultimately do with it 
if or when we build it? The first question is rightfully the domain of physics 
and engineering, and can be informed by computer scientific investigations. 
The second question, however, is more computer scientific in flavor, closer to 
algorithms and computational complexity. 

Unfortunately, the subject of quantum computation is daunting to many 
computer scientists — the very people who may be best equipped to address 
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the second question, above, and advance the frontier of knowledge in the field. 
Expositions of quantum computation often use physical concepts to explain 
such things as qubits (quantum bits), and so tacitly assume some physical 
background, leading nonphysicists to think that they must learn physics, 
especially (heaven forbid) quantum mechanics, in order to understand what 
is going on. The purpose of this article is to show how incorrect this thinking 
is; one can gain a solid, precise grasp of the standard quantum model of 
computation — quantum circuits — with no physics background, and without 
having to learn any physics along the way. (I am not being completely 
fair to some of the better expositors of the subject of quantum computing, 
such as Nielsen and Chuang PQ, who stress the simple axiomatic nature of 
the quantum mechanics needed for quantum computation. Yet their book, 
being much more comprehensive than the current article, gives a good deal 
of information that is not immediately relevant to a basic grasp of quantum 
circuits.) 

I will introduce quantum circuits using a simple and close analogy with 
classical (that is, nonquantum) Boolean and probabilistic circuits. The goal is 
to introduce as few concepts as possible that are foreign to computer science. 
To these ends, I will first review classical deterministic Boolean circuits. 
My approach will be nonstandard, but clearly equivalent to the standard 
approach. I will then add probabilistic, "coin-flip" gates to the model to 
arrive at the probabilistic circuit model. The coin-flip gate is an example 
of a nondeterministic gate. The quantum model is obtained by replacing 
coin-flip gates with a certain other type of nondeterminstic gate. 

I assume some knowledge on the reader's part of linear algebra, Boolean 
logic, and computational complexity, such as polynomial time, P, and NP. 

1.1 A Few More Remarks 

One cannot really split the two big questions above so cleanly into traditional 
academic disciplines. There has been, and continues to be, much useful col- 
laboration going on between the two realms. The fact that there is a simple, 
abstract model of quantum computation at all — one that we can divorce 
from physical considerations — owes much to the foundational work of people 
in both areas, such as L. Adleman, C. Bennett, E. Bernstein, G. Brassard, 
J. DeMarrais, D. Deutsch, R. Feynman, M.-D. Huang, U. Vazirani, A. Yao, 
and many others. Although quantum circuits are currently the preferred 
way to represent quantum computation, there are other ways, such as quan- 
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turn Turing machines. Quantum Turing machines and quantum circuits are 
equivalent for describing quantum computation, with modest overhead for 
one model to simulate the other. There is a lot of detailed background on 
these topics which I will not go into here. I suggest looking to Nielsen and 
Chuang |I| for more information and bibliographic references. 

2 Acknowledgments 

This article grew out of a somewhat impromptu introductory talk I gave at 
Dagstuhl 1 in the Fall of 2002. I have enjoyed many rewarding encounters 
and discussions at this and previous Dagstuhl seminars, and I wish to thank 
the organizers of the seminar, Harry Buhrman, Lance Fortnow, and Thomas 
Thierauf, for inviting me. Thanks also to the European Community for 
providing financial assistance to me and the other guests. Finally, I thank 
Lance Fortnow for suggesting (the night before) that I give a talk along these 
lines, and for inviting me write it up for BEATCS. 

3 Boolean Circuits 

Here is a quick review of the Boolean circuit model. Our approach is slightly 
unorthodox — for reasons that may become clear later — but is clearly equiv- 
alent to the traditional approach. 

We imagine n registers, each capable of holding a single bit (possible 
values: for false, or 1 for true). A Boolean gate computes some logical 
operation of some registers and places the result in a register. We label the 
gate with the logical operation it performs. For the Boolean case, we can 
restrict our attention to monadic and dyadic gates (i.e., gates operating on 
one or two bits) that place the result in one of the operand registers. For 
example, in this diagram, 



1 Schloss Dagstuhl International Conference and Research Center for Computer Science, 
Seminar 02421, "Algebraic Methods in Quantum and Classical Models of Computation," 
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we have a single gate acting on two registers (the horizontal lines). It com- 
putes the logical AND of the two register values, and sets the second (lower) 
register to the result, leaving the first register unchanged. For this reason, 
the second bit is called the target, and the first bit the control. 2 In all our 
diagrams, we consider time flowing from left to right, so that inputs to the 
gate appear to the left, and outputs to the right. We consider a gate to be a 
transformation on all bits it acts on, even though some bits values may not 
change (e.g., the control). 

A Boolean circuit is a sequence of gates applied chronologically to the 
registers. For example, this circuit 




(a A b) V c 



yields the values shown on the right, given arbitrary input values a,b,c e 
{0, 1}. It makes no difference whether the NOT gate occurs before or after 
the OR gate, since they involve different registers. We can thus depict them 
as acting simultaneously, but if we must choose, we'll say that the NOT gate 
acts first. 

If we label the registers involved in a circuit as r±, . . . ,r n , then a circuit 
can also be described as a straight-line program with assignment instructions 
of the form r» := op n where op is a dyadic Boolean connective, or of the 
form T{ := -ir*. The program corresponding to the circuit above is 



r 2 

n 

r 2 



= r 2 A n 

= -in 

= r 2 V r 3 



We'll denote the state of the registers at any given time by \v), where v 
is a vector of n bits, one for each register. There are a total of 2™ possible 
states. In the circuit above, the initial state is \a,b,c). After the first gate 

2 This particular example is not quite in keeping with standard usage of these terms in 
electrical engineering. There, if the control bit is off, then nothing should happen to the 
target, which is clearly not the case here. 
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is applied, the state is \a, (a A b), c), and so on. The complete progression of 
states is 

\a, b, c) i— > \a, (a A b), c) t— > \->a, (a A 6), c) h- > |-ia, ((a A 6) V c), c). 
Thus a circuit describes a mapping of states to states. 



3.1 Input and Output 

We'll designate the first k registers as inputs (for some < k < n) and the 
first £ registers as outputs (for some < £ < n). Each noninput register 
is given an initial value either or 1, and this value is considered part of 
the description of the circuit. Noninput, nonoutput registers are sometimes 
called ancillas. For example, we can use an ancilla to copy a bit: 




At the end of the circuit, we observe the value in the output registers as 
the result of the circuit, discarding the nonoutput registers. In this way, a 
Boolean circuit C computes a function {0, l} k — > {0, 1} . If £ — 1, then we 
regard C as recognizing a subset of {0, l} k . 

A circuit family is an infinite sequence Co, C±, C 2 , . . . of circuits such that 
each Ci has exactly i inputs and one output. A circuit family computes a lan- 
guage L C {0, 1}* in the usual way. A circuit family is ptime uniform if there 
is a polynomial-time deterministic computation that outputs (a description 
of) Ci on input V . Ptime uniform families of Boolean circuits capture the 
language class P in this sense: a language L is in P if and only if there is a 
ptime uniform family of Boolean circuits computing L. 



3.2 Reversibility 

The AND and OR gates described above won't quite work in the quantum 
circuit model. To be considered a legitimate quantum gate, the gate must act 
reversibly. No information can be lost from input to output; in other words, 
the input values of the gate must be recoverable from the output values. 
Fortunately, using just reversible gates we can do everything we did before 
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with AND, OR, and NOT gates with just a constant factor of overhead. 
Consider the three-bit Toffoli gate with two controls and a target (here, © 
means exclusive or): 



c © (a A b) 



This gates is reversible; in fact, it is its own inverse. Moreover, it is not hard 
to see (exercise) how the Toffoli gate, along with appropriate ancillas, can 
simulate the AND and NOT gates and can copy a bit. (If we only allow 
as an initial ancilla value, then we must also allow the NOT gate. This is no 
problem, because the NOT gate is reversible.) 

Another often-used reversible gate is the controlled NOT or CNOT gate 



a®b 



which can be implemented easily using a Toffoli gate and an ancilla. 

If we do use one or more ancillas to implement a gate as a subcircuit, we 
will insist that the ancillas be used cleanly. That means that the ancillas end 
with the same values they started with, regardless of the values of the other 
registers. Go back and make sure that all your ancillas were used cleanly. 



4 Probabilistic Circuits 



To implement probabilistic computation with circuits, we need to introduce 
a new type of gate to our model. For any rational numbers < p, q < 1, we 
will allow a biased coin- flip gate 





p,q 
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Informally, this gates behaves as follows. If the input register is 0, then a 
coin with bias p is flipped, and the output register is with probability p and 
1 with probability 1 — p. If the input register is 1, then a coin with bias q is 
flipped, and the output register is with probability q and 1 with probability 
1 — q. One or both biases may be |. 

To keep track of the probabilities, we now need to redefine our notion 
of state. Assume all 2™ tuples \x±, . . . ,x n ) form a basis of a real vector 
space H. That is, 7i is the 2 n -dimensional free real vector space over the 
set of tuples. We call the set of tuples the computational basis (the tuples 
themselves being basis states), and we use this basis to identify 7i with R 2 ™. 
We redefine a state to be a certain vector in H — a linear combination (or 
"superposition") of basis states whose coefficients are probabilities. Then 
gates will now correspond to linear mappings from TC to Ti. In particular, 

xi 



X i 





p,q 









maps the basis state \x\, . . . , Xj-i, 0, Xi+i, . . . , x n ) to the state 

, . . . , Xi—i, 0, Xi+i , - - - , X n ) + (1 p) \ x\ , . . . , Xi—i , 1, , • • • , X n ) , 

and maps the basis state \xi, . . . , Xj-i, 1, Xi+i, . . . , x n ) to 

q | Xi, . . . , Xi—i, 0, Xi+i, . . . , X n ) "I - (1 9)1*^1) • • • i ■Ei—l-i 1) ■ ■ ■ i %n) ; 

Note that the values of the bits besides the ith bit are unaffected. Ignoring 
the other bits for a moment, this gate maps the one-bit basis state |0) to 
p\0) + (1 — p)\l) and likewise maps |1) to q\0) + (1 — These two 

resulting states can be described geometrically as the points (p, 1 — p) and 
(g, 1 — q) on the line segment connecting (1, 0) and (0, 1): 
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A 




|0> 

In this example, p — | and g = |. The gate always maps this line segment 
into itself. 

We can represent states as a column vectors of probabilities. Then the 
action of the coin-flip gate on its single bit can be described succinctly by 
the 2x2 columnwise stochastic 3 matrix 

P 1 
1 — p 1 — q 

We extend the action of each Boolean gate of Section El to a linear map on 
TC. Each maps basis states to basis states, so it corresponds to a matrix with 
entries in {0, 1}. Each column of this matrix has exactly one 1, and so the 
matrix is also columnwise stochastic. If the gate is reversible, then the corre- 
sponding matrix is a permutation matrix. So for example, the (irreversible) 
AND gate depicted in Section |3] has the matrix 

"110 0" 

10' 
1 

where we assume that the column vector corresponding to a state always 
has its coefficients listed in increasing lexicographical order by basis state — 
in this case, 1 00) , |01), |10), |11). The Toffoli gate depicted there has the 

3 A matrix is columnwise stochastic if all its entries are nonnegative real, and all columns 
sum to 1. 
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matrix 



1 











1 











1 














1 
1 












1 














1 










1 





A probabilistic circuit is one that allows only Boolean gates and biased 
coin-flip gates. The gates are applied in order from left to right, as before. 
We require the initial state to be a basis state, corresponding to a particular 
Boolean input as in Section |H1 The final state of the registers is some vector 



where the p x are real coefficients. Because each gate is stochastic, it preserves 
the ^-norm (sum of coefficients) of the state vector, so that the intermediate 
states and the output state all have unit ^-norm, and thus \p x \ = 1. 
Furthermore, all matrix entries are nonnegative, so p x > for all x. We 
interpret the p x as probabilities; namely, p x represents the probability that 
the registers will be in basis state \x) at the end of the computation. Thus 
the final state corresponds to a probability distribution of basis states, as we 
would expect. 

Thinking geometrically again for a moment, define the standard simplex 
in 7i to be the set of all convex linear combinations of the basis states. 4 
This generalizes to m dimensions the line segment shown above, which is the 
standard 1-dimensional simplex in K 2 . A probabilistic circuit corresponds 
to a linear transformation on 7i that maps the standard simplex into itself. 
The initial state is always a basis state — which is in the simplex — so the final 
state is also in the simplex. 

Here is a simple example of a probabilistic circuit. It has no input regis- 
ters, but rather computes the majority of three unbiased coin flips. 

4 A convex linear combination of vectors v\, . . . ,v n is a vector of the form Y^iLi c i v ii 
where each Ci > and Y1T=\ c « = 1- 




ze{0,i} 
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1 © 1 

Recall that the output bit is in the first register. We observe the output 
bit as follows: write | final) as 

P0x 2 -x„|0, X2, • • • , X n ) + Plx 2 -x„|l, #2, . . . , £„). 

The probability of seeing is then x £>ox 2 -x„j and likewise the probabil- 

ity of seeing 1 is J2 X2 x n P^ 2 -x n - These formulas generalize in the obvious 
way to the case of more than one output register being observed. 

4.1 More Complexity Classes 

Many well-known complexity classes can be characterized using ptime uni- 
form families of probabilistic circuits and placing a threshold on the proba- 
bilities of observing 1 on a given input. Let an acceptance criterion be a pair 
(R,A) of disjoint subsets of the unit interval [0, 1]. A ptime uniform proba- 
bilistic circuit family Co, Ci, . . . with acceptance criterion (R, A) computes a 
language L if, for all n > and all input strings x of length n, if x G L then 
p G A and if x (jL L then p G R, where p is the probability of seeing 1 on 
the output bit of C n when the input is x. Using ptime uniform probabilistic 
circuits, we get the following correspondences between acceptance criteria 
and complexity classes: 



Class 


Acceptance Criterion 


P 

NP 
RP 
BPP 
PP 


({0},{1}) 
({0},(0,1]) 

({o},(UD 
([o,I], 
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4.2 Robustness 



There is no essential reason to allow arbitrary rational p,q e [0, 1] for our 
coin-flip gates, at least as far as the above complexity class characterizations 
are concerned. It is well-known that we could restrict the value of (p, q) to 
be, say, (0, |), and the above classes would remain the same. Furthermore, 
we could restrict the location of coin-flip gates to appear only on the leftmost 
column of the circuit, being the first gates applied to their respective ancillas, 
whose initial values are all 1. 

We will see similar robustness phenomena when we choose gates for quan- 
tum circuits in the next section. 

5 Quantum Circuits 

We'll define quantum circuits in much the same manner as we defined prob- 
abilistic circuits. States are vectors in the real vector space H as before, and 
gates correspond to certain linear transformations on Ti as before. We only 
make two seemingly minor changes in the kinds of gates we allow: 

1. We drop the restriction that entries in matrices corresponding to gates 
be nonnegative. We now allow negative entries. 

2. Instead of preserving the ^-norm of state vectors, gates must instead 
preserve the £ 2 - n orm (i.e., the Euclidean norm) of state vectors. 

The £ 2 -norm of a real vector ( ) is \J a\ + • • • + a^j. The linear 

transformations that preserve the £ 2 -norm are exactly the ones represented 
by orthogonal matrices, i.e., matrices M such that MM t = M t M = J, or 
equivalently, matrices whose columns form an orthonormal set with respect 
to the usual inner product on column vectors. (Note that our description of 
the £ 2 - n orm implicitly makes the computational basis an orthonormal basis.) 
Because of these two changes, we can no longer interpret coefficients on basis 
states as probabilities — a problem we'll fix shortly. 

We now call the registers qubits (quantum bits) instead of bits. 

A simple and very useful quantum gate is the one-qubit Hadamard gate, 
denoted by H: 

H 
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Its matrix is 



1 

7! 



This gate maps the one-bit basis state \b) to ^(|0) + (— l) b |l)), for b 6 
{0, 1}. The two possible resulting states can be described geometrically as 
the following points on the unit circle: 




The transformation amounts to a reflection in the |0)-axis followed by a 
counterclockwise rotation through 7r/4. As with any legal one-qubit quantum 
gate, it maps the unit circle onto itself. Note that H 2 = I, the identity map. 
That is, H is its own inverse. 

A quantum circuit is a circuit that allows only quantum gates. It corre- 
sponds to an orthogonal linear transformation of Tl, and thus it maps the unit 
sphere in Ti onto itself. Here's an example taken from Nielsen and Chuang 
PJ Exercise 4.20]. This particular example is interesting in that it blurs the 
distinction between the control and target qubits. I'll justify below that the 
CNOT gate qualifies quantum gate. 





H 
H 




H 
H 






< 















12 



As an exercise, write out the state just after the CNOT gate is applied but 
before the two final Hadamard gates, assume the initial state is 1 00) . This 
circuit is actually equivalent to 



-e- 



5.1 Input and Output 

Input and output registers are defined as before. The initial state of the 
circuit is a basis state as before, and the final state is 

(final) = a> x \ x ), 
xe{o,i}" 

where the a x are real coefficients. By the preservation of the £ 2 - n orm, | final) 
has unit £ 2 -norm, so we have Y^ x a 2 x = 1- This suggests that we interpret 
a 2 x as the probability associated with the basis state \x) in the final state. 
This is indeed what we do; the a x are known as probability amplitudes. We 
observe the output qubit in the final state and see and 1 with probabilities 

^-Xn aIld a l*2-x n , 
X2f^,X n X'2 ,...,X n 

respectively. These formulas generalize in the obvious way to the case of 
more than one output register being observed. 

Since it is the squares of the amplitudes that affect the probabilites, the 
sign of an amplitude (that is a versus —a) in | final) has no observable ef- 
fect. The upshot of this is that we can and often do ignore an unconditional 
discrepancy of sign. For example, the two gates H and —H are completely 
interchangeable in any circuit; swapping them will lead to all the same ob- 
servation probabilities in the end. The unconditionality is important here; 
the sign change must apply to the whole matrix. The following two gates are 
not interchangeable, even though corresponding entries differ at most by a 
change of sign: 



" 1 


" 


and Z = 


' 1 


" 





1 





-1 



To see that the two gates cannot be interchanged, compare the circuit 
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H 



H 



with 



H 



H 



with initial state |0) for both. The first circuit does nothing, since HIH = 
H 2 = I, so its the final state is |0). For the second circuit, however, we have 

|0) * M^i> A BzM A n), 

And it can be easily checked that |1) maps to |0). Thus the second circuit is 
equivalent to a NOT gate. 



5.2 Still More Complexity Classes 

As with probabilistic circuits, several new (and some old) complexity classes 
can be defined using ptime uniform families of quantum circuits with various 
acceptance criteria. 



Class 


Acceptance Criterion 


EQP 
C^P 
RQP 
BQP 
PP 


({0},{1}) 

(W,(o,i]) 

({0},Q, i]) 
([0,11,(1,1]) 



5.3 What Quantum Gates Should We Allow? 

The happy answer to this question is that it largely does not matter. Several 
results in the literature show that a large variety of collections of quantum 
gates are all equivalent for defining the complexity classes above. Such col- 
lections are called universal for quantum computation. We'll describe a few 
universal collections here. 

First we need to know: can a Boolean gate of Section|3]serve as a quantum 
gate? The answer is yes if and only if the gate is reversible. Recall that a 
Boolean gate corresponds to a matrix of 0s and Is, and to be a quantum gate 
the matrix must be orthogonal. The only such matrices are permutation 
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matrices, corresponding to reversible Boolean operations. Thus the AND 
and OR gates are not allowed, but the NOT, CNOT, and Toffoli gates are. 

A recent result of Shi shows that the Hadamard gate H and the Toffoli 
gate together form a universal collection [2]. In fact, Shi showed that the 
Toffoli gate together with any single-qubit gate that maps some basis state 
to a linear combination of two or more basis states form a universal collection. 
(He also showed that the CNOT gate together with any single-qubit gate G 
such that G 2 maps some basis state to a linear combination of two or more 
basis states serves as a univeral collection.) These are certainly minimalist 
universal collections. On the other end of the spectrum, we may allow any 
finite collection of quantum gates whose matrix entries are approximable in 
polynomial time. (A real number r is polynomial-time approximable if the 
nth digit in the binary expansion of r can be computed in time polynomial 
in n.) 

Here's one more universal collection. It consists of three gates: CNOT, 
Hadamard, and the two qubit-gate 




described by the matrix 

"10 
10 
cosf -sinf ' 
sin f cos f 

We'll denote this gate, and its corresponding linear transformation, by T. 
Clearly T 8 = /. Thus T 7 = T -1 , and we denote this inverse gate by 



♦ 

The Toffoli gate can be simulated exactly by the following rather amazing 
circuit consisting of CNOT, Hadamard, and T-gates: 
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-e- 















-H 




^ . r 


> r 










J 






H ~ 




J 


v. 


J 



















10) 



|0) 



The fourth qubit on the right is an ancilla. Note that it is used cleanly here; 
the final state of the right circuit has no components where the value of the 
ancilla is 1, regardless of the initial state of the other three qubits. If we 
start with a quantum circuit with Toffoli gates, then we can systematically 
replace each Toffoli gate with the subcircuit on the right, and we can reuse 
the same ancilla repeatedly for each replacement. 



6 Complex Probability Amplitudes 

We've developed the quantum circuit model using real probability ampli- 
tudes only. This suffices, but more traditional approaches allow complex 
amplitudes. I'll show the connection between the two approaches. 

We start by generalizing the inner product of two real vectors in W 71 to 
the Hermitean inner product of complex vectors in C m as follows: let u = 
(iti, . . . , u m ) and let v — (v \, . . . , v m ) be column vectors. Their Hermitean 
inner product is 

m 

(u\v) = 22ulVi, 

2=1 

where z denotes the complex conjugate of z. Note that (u\u) = J2i \ u i\ 2 — 0> 
with equality holding iff u = 0. The Hermitean norm \u\ of u is a/ (u\u) A 
matrix M that preserves the Hermitean inner product (that is, (Mu\Mv) = 
(u\v) for all u, v) is called unitary. The adjoint of a matrix M, written M\ is 
the conjugate transpose of M; that is, the (i, j)th entry of is the complex 
conjugate of the (j, i)th entry of M. It is easy to see that a matrix M is 
unitary if and only if MM+ = M+M = /. This is in close analogy with 
real orthogonal matrices; in fact, a real matrix is unitary if and only if it is 
orthogonal. This means that the real-amplitudes model of Section 03 embeds 
nicely in the present model, simply by restricting the amplitudes to be real. 
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The computational basis is as before, but allowing complex coefficients 
means that the space TC is now identified with C 2 " . Quantum gates now must 
correspond to unitary transformations. As previously, a quantum circuit 
starts in a basis state, which has unit Hermitean norm. The unitary gates 
preserve the norm of the state, so that the final state XLe{o i} n a A x ) satisfies 
\ a ^\ = 1- We therefore interpret | (X% I cLS the probability that the final 
state of the circuit is \x). 

Does this give a more powerful model than the one in Section El using real 
amplitudes? No, not really. Both define the same complexity classes. In fact 
one can easily transform a quantum circuit with complex amplitudes into an 
equivalent quantum circuit with real amplitudes at the expense of including 
one extra ancilla and adding one to the arity of some of the gates. 

If M is any k x i complex matrix (this includes row and column vectors), 
we transform it into a 2k x 21 real matrix p(M) as follows: replace every 
entry x + yi of M by the 2x2 real matrix 

x -y 
_y x _ ' 

We have the following facts: 

• p(MN) = p(M)p(N), and p(M 1 + aM 2 ) = p{M 1 ) + ap(M 2 ), where 
a G C, and M, Mi, M 2 , and iV have any appropriate dimensions. 

• p(Mt) = p(Mf 

• M is unitary if and only if p(M) is orthogonal. This follows from item 2. 

• p(I) = I. Here the second / is of course bigger than the first. This 
follows from item 1. 

If u is column vector in C m , then p{u) is technically a 2m x 2 matrix. There 
are only 2m real degrees of freedom in u, however, so we can identify u with 
a vector in M 2m . The real dimension is twice the complex dimension. Since 
adding a new qubit to a set of registers doubles the dimension of H, this 
suggests that we can simulate a circuit with complex amplitudes by a circuit 
with real amplitudes and one additional ancilla, and any gates with nonreal 
entries are simulated by gates that interact with this ancilla. All this indeed 
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works using the p transformation above. The T-gate defined in Section is 
actually p applied to the one-qubit gate with matrix 

"1 

e i7r/A J ' 

which is kind of "conditional phase shift" gate. The circuit simulating the 
Toffoli gate in Section |3] was derived from a well-known complex-amplitude 
quantum circuit (see [T], for example). 
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